# Plugin for request logging

**URL:** <https://discuss.elastic.co/t/plugin-for-request-logging/2746>\
**Category:** Elasticsearch\
**Created:** [June 15, 2015, 10:45pm UTC](https://discuss.elastic.co/t/plugin-for-request-logging/2746 "2015-06-15T22:45:38Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![mkelkar](https://avatars.discourse-cdn.com/v4/letter/m/ea666f/32.png) [@mkelkar](https://discuss.elastic.co/u/mkelkar)\
**Post date:** [June 15, 2015, 10:45pm UTC](https://discuss.elastic.co/t/plugin-for-request-logging/2746/1 "2015-06-15T22:45:38Z")

</div>

Hi All,  
I am wondering whether its feasible to write a plugin to log elasticsearch requests. I looked at several plugins, but they only add new rest endpoints. Is it possible to write a plugin that "intercepts" rest requests and log them? Please advice.

Thanks,  
Madhav.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 15, 2015, 10:47pm UTC](https://discuss.elastic.co/t/plugin-for-request-logging/2746/2 "2015-06-15T22:47:17Z")

</div>

You'd have to hook into the netty server to intercept requests but I don't know how feasible that is.

However you can get this with Shield via auditing, or you can wrap a proxy (nginx/apache) in front and do it that way.

---

<div class="post-metadata">

**Author:** ![eperry](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/eperry/32/551_2.png) [@eperry](https://discuss.elastic.co/u/eperry)\
**Post date:** [June 17, 2015, 7:22am UTC](https://discuss.elastic.co/t/plugin-for-request-logging/2746/3 "2015-06-17T07:22:09Z")

</div>

if you use http you could always use packetbeat to capture the requests. But be careful of recursion

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 12:07am UTC](https://discuss.elastic.co/t/plugin-for-request-logging/2746/4 "2017-07-06T00:07:05Z")

</div>


